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Honorable Commissioner of Patents RECEIVED 
Washington, DC 20231 

OCT 2 5 2004 
Response A Technology Center 2100 

sir: 

[01] This is a response to the Office Action maUed July 14, 2001. 
All outstanding rejections are traversed as detailed below. No 
amendments are presented. Reconsideration is respectfully 
requested. 

[02] The Office Action rejects Claims 1 and 5 based on a 
combination of U.S. Patent AppUcation No. 2004/0103167 to 
Grooters et al., "Grooters" herein, U.S. Patent Application No. 
2003/0046361 to Kirsch et al., "Kirsch" herein, and U.S. Patent No. 
6,389,460 to Stewart et al. "Stewart" herein. The Office Action 
refers to "Ferguson" In a couple of places; herein it is assumed that 
"Ferguson" means "Stewart". If there is actually a distinct 
"Ferguson" reference, please identify it by patent nimiber. 
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[03] The present invention improves upon prior art in which a 
request processor receives incomplete HTTP requests pending their 
completion and then processes the completed requests. Such 
systems are vulnerable to denial-of-service attacks as legitimate 
requests can be rejected while the request processor waits for bogus 
incomplete requests to be completed. The present invention 
withholds incomplete HTTP requests. The invention provides for 
passing once-incomplete HTTP requests to the request processor 
once they have been completed. However, incomplete HTTP 
requests can be retired instead of being passed on if they are not 
completed in a timely manner, as determined by the storage 
limitations, e.g., queue depth. 

[04] The Office Action cites Grooters (Page 5, paragraph 39) for 
teaching "an admissions control system for a host site comprising a 
trap that withholds from a request processor incomplete HTTP 
requests". The cited paragraph actually reads: 

[05] [0039] An error control system module 436 may log all 
errors and communications problems which occur during the 
course of processing messages. This module preferably traps 
errors which occur so that they are not displayed over any 
currently executing application. Preferably, a user may select to 
display the error messages on the user interface if desired. 

[06] In this paragraph, there is no reference to an admissions 
control system, no reference to a host site, no reference to a request 
processor, and no reference to requests, HTTP or otherwise, 
incomplete or otherwise. Paragraph 39 does refer to a "trap" but it 
traps errors "so that they are not displayed over any executing 
application". An incomplete HTTP request is not an error, it is a 
normal packet of information, so there is nothing in Grooters that 
remotely suggests trapping incomplete HTTP requests. 
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[07] The Office Action concedes that Grooters "fails to teach 
wherein the request is http request". However, even this apparently 
assumes Grooters teaches trapping requests, which it does not. 

[08] The Office Action further concedes that Grooters fails to 
teach "retiring incomplete HTP requests to avoid exceeding a 
storage limitation. The Office Action then asserts that Kirsch 
teaches retiring incomplete http requests. The pertinent paragraph 
of Kirsch reads: 

[09] [0062] A preferred method 40 of processing redirection 
URLs provided to a server computer system 16 by a client 
computer system 12 is illustrated In FIG. 3. As each client 
request is received 42 the data provided as part of the request is 
examined to determine whether the request embeds the redirect 
key word 44. If the URL data does not specify a redirection 
request consistent with the present invention, the URL data is 
checked 46 to determine whether the URL data conventionally 
specifies an existent local web page. If the web page does not 
exist or, based on the client identification data provided via the 
HTTP protocol in connection with the URL client request, the 
particular client is not permitted access to the existent web 
page, the HTTPd server 30 determines a corresponding error 
message 48 that is returned to the client computer system 12. 
Otherwise, the HTTPd server 30 proceeds and serves the local 
web page 50 to the client computer system 1 2. 
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[1 0] Paragraph 62 does refer to HTTP and it may be fair to assume 
that the mentioned "client" request is an HTTP request- However, 
there is no mention of incomplete requests, HTTP or otherwise. 
Kirsch does differentiate requests that specify a redirection key 
word and those that do not, but both are complete requests. The 
requests that do not specify a redirection key word may refer to an 
accessible site or not, but in either case the request is complete. 
There is also no teaching concerning either withholding or retiring 
requests, incomplete or otherwise. Kirsch only deals with requests 
that are processed, although the processing may result in an error 
message rather than a requested web page. Thus, the Office Action 
is in error in asserting that Kirsch discloses trapping incomplete 
HTTP request or even anything concerning incomplete HTTP 
requests. 

[11] As asserted by the Office Action, Stewart discloses a method 
in which certain stored objects are cleaning outdated images from 
image storage to meet storage limitations. However, the objects 
being managed are images and not incomplete HTTP requests. As 
there is no suggestion in Grooters or Kirsch regarding storage, 
storage limitations, or retiring any objects, let alone incomplete 
HTTP requests, there is no motivation to combine Stewart with 
these other references as proposed in the Office Action. 
Accordingly, the obviousness rejections of Claims 1 and 5 should be 
withdrawn. 
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[12] Regarding dependent Claims 2 and 6, the Office Action 
asserts that Grooters teaches a trap sending requests to a deferral 
manager, citing paragraph 39, quoted above. However, this 
paragraph does not mention a deferral manager at all. The Office 
Action goes on to assert that Grooters teaches sending complete 
HTTP requests to the deferral manager and responding to some 
complete HTTP requests with deferral messages. However, there Is 
no such teaching in Grooters. 

[13] The Office Action further asserts that Klrsch discloses a 
deferral manager that sends some complete HTTP requests to a 
request processor and responding to some HTTP complete requests 
with deferral managers, citing paragraph 62, quoted above. 
However, Klrsch does not disclose responding to complete HTTP 
requests with deferral messages. The messages mentioned by 
Klrsch indicate that a requested web site does not exist or that the 
client Is not permitted to view the requested web site. In contrast, a 
deferral message is to the effect that the current web site Is busy 
but should be available to the client at a later time. Accordingly, the 
finding of the additional limitations of Claims 2 and 6 in the cited 
references are without foimdation and the associated groimds of 
rejection should be withdrawn. 
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[14] CONLUSION 

[1 5] The present invention relates to incomplete HTTP requests, 
which are not even dealt with by any of the cited references. The 
further limitations regarding how they are dealt with and how 
complete requests can be deferred are not addressed in any of the 
cited references. Accordingly, AppUcant respectfully requests 
allowance of the application in its current form. 

Respectfully submitted 




CliftOTi L, Anderson 
Reg. No. 30,989 
(408) 245-0820 
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